You have a Microsoft Entra tenant. You need to configure continuous access evaluation for app sign-ins and assign the configuration to users that are assigned the Application Administrator role…

Question

Options

• Aa sign-in risk policy
• Ban access review
• Ca Conditional Access policy
• Dthe Admin consent settings

• A
  2% (1)
• B
  9% (4)
• C
  77% (33)
• D
  12% (5)

Explanation

Conditional Access policies (Option C) are the correct tool for configuring Continuous Access Evaluation (CAE) in Microsoft Entra ID, as they allow you to enforce real-time session controls and token validation for app sign-ins, and can be scoped to specific users or groups - including those assigned the Application Administrator role.

Why the distractors are wrong:

• Option A (Sign-in risk policy) is an Identity Protection feature that responds to risky sign-in behavior, but it does not directly configure or assign CAE settings.
• Option B (Access review) is used to periodically audit and recertify user access to resources - it has no relationship to real-time session evaluation or CAE.
• Option D (Admin consent settings) controls how users and admins grant permissions to applications, which is unrelated to continuous access evaluation.

Memory tip: Think of Conditional Access as the central control panel for "how and when" users can access resources in Entra ID - if a question involves enforcing or customizing authentication/session behavior for specific users or apps, Conditional Access is almost always the answer.

No community discussion yet for this question.